CodeThreat review
A broad AppSec toolkit with a free entry point and $39-per-contributor Pro pricing.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
CodeThreat brings static application security testing together with software composition analysis, infrastructure-as-code checks, and secret scanning. It is aimed at development teams that want security findings in repository and pull-request workflows, rather than a standalone SAST tool. AI-assisted project-wide code review, repository mapping, and false-positive review add analysis around the findings. Small teams can start with the Free Plan; teams needing broader controls can consider Pro or Enterprise.
Workflow fit is one of CodeThreat’s clearest strengths. It integrates with GitHub, GitLab, Azure DevOps, Bitbucket Cloud, and Bitbucket Server, and supports CI/CD tools including GitHub Actions, Jenkins, and Bamboo. Pull-request scanning and security feedback connect checks to code changes, while custom pattern-based and semantic rules allow teams to define additional security checks. The product is available through web and API access, with cloud and self-hosted deployment options. This breadth may suit teams consolidating several code-security checks in their development workflow; teams seeking only SAST may find the range broader than they need.
The Free Plan includes SAST and SCA scanning, but limits agentic PR review and false-positive elimination. Pro is priced at $39 per contributor per month and adds role-based access control, secret scanning, infrastructure security, Jira integration, and vulnerability reports and exports. Enterprise adds on-premises deployment, SLA and dedicated support, advanced compliance reporting, and private LLM hosting options. The per-contributor Pro model is worth weighing as a team grows. CodeThreat fits teams that value a free starting tier and multiple security checks; buyers who need the Enterprise deployment or support options should assess that tier, while teams focused on a narrower SAST workflow may prefer a more specialized product.
CodeThreat pros and cons
- Where it wins
- Free Plan includes SAST and SCA scanning.
- Scans can cover IaC, secrets, repositories, and pull requests.
- Integrates with GitHub, GitLab, Azure DevOps, and CI/CD tools.
- Where it doesn't
- Free Plan limits agentic PR review and false-positive elimination.
- Pro pricing is $39 per contributor per month.
- On-premises deployment and dedicated support are Enterprise features.
CodeThreat fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update